SMS phishing scam lures Rogers customers with outage refunds

Cybercriminals target Rogers customers with a new SMS phishing campaign pretending to be refunds for last week's Canada-wide wireless outage.

Last week, Rogers suffered a massive outage throughout Canada, preventing users from accessing wireless voice and data services.

This outage lasted almost the entire day and was caused by a bad software update to Rogers' cellular infrastructure.

In response, Rogers promised a refund equivalent to a day of wireless service for affected customers.

Smishing scam targets Rogers customers

This week, customers began receiving smishing (SMS phishing) texts that pretend to be from Rogers, offering a refund for last week's outage.

These texts state that Rogers is giving customers a $50.00 CAD refund, and to claim it, they need to visit the included link, as shown below.

Rogers smishing scam about outage refunds
Source: Twitter

All of the links in these texts lead to websites hosted on an IP address rather than a domain. From the texts seen by BleepingComputer, the IP addresses associated with this scam are:

As the sites have all been shut down, it is unknown what information was being phished, but it was likely Rogers customer's personal and account information.

Rogers is aware of the scam and has issued warnings on Twitter to "forward the content of the SMS to 7726 (SPAM), to register it for investigation/blocking from the network."

If you accidentally visited a link from this smishing scam and entered your Rogers account credentials, you should immediately log in to your account and change your password.

If you provided other information, such as phone numbers, email addresses, and mailing addresses, you should also be on the lookout for other scams.